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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

• Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply Is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the OfTice later than three months after the nr)ailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)13 Responsive to communication(s) filed on 08 July 2004 , 
2a)n This action is FINAL. 2b)l3 This action Is non-finaL 

3) n Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Clainns 

4) 13 Claim(s) 1-12 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

6) 13 Claim(s) 1-12 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) n The specification is objected to by the Examiner. 

10) ^ The drawing(s) filed on 08 July 2004 is/are: a)n accepted or b)S objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet{s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) 0 The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) S Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 
a)S All b)n Some * c)^ None of: 

1 .□ Certified copies of the priority documents have been received. 

2.n Certified copies of the priority documents have been received in Application No. . 

3.13 Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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3) 3 Information Disclosure Statement(s) (PTO-1 449 or PTO/SB/08) 5) □ Notice of Informal Patent Application (PTO-1 52) 

Paper No(s)/Mail Date 07082004.011805 6) □ Other: . 
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DETAILED ACTION 

1. Claims 1-12 are pending. 

Information Disclosure Statement 

2. The information disclosure statement (IDS) submitted on July 8, 2004 and July 
18, 2005 was filed before First Action. The submission is in compliance with the 
provisions of 37 CFR 1 .97. Accordingly, the information disclosure statement is being 
considered by the examiner. 

Drawings 

3. The drawings are objected to because the background of Figure 1 (best available 
copy does not have a clear white background (Examiner objects to the numerous small 
black dots on the background). Corrected drawing sheets in compliance with 37 CFR 

1 .121(d) are required in reply to the Office action to avoid abandonment of the 
application. Any amended replacement drawing sheet should include all of the figures 
appearing on the immediate prior version of the sheet, even if only one figure is being 
amended. The figure or figure number of an amended drawing should not be labeled as 
"amended." If a drawing figure is to be canceled, the appropriate figure must be 
removed from the replacement sheet, and where necessary, the remaining figures must 
be renumbered and appropriate changes made to the brief description of the several 
views of the drawings for consistency. Additional replacement sheets may be necessary 
to show the renumbering of the remaining figures. Each drawing sheet submitted after 
the filing date of an application must be labeled in the top margin as either 
"Replacement Sheet" or "New Sheet" pursuant to 37 CFR 1 .121(d). If the changes are 
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not accepted by the examiner, the applicant will be notified and informed of any required 
corrective action in the next Office action. The objection to the drawings will not be held 
in abeyance. 



Specification 

4. The following guidelines illustrate the preferred layout for the specification of a 
utility application. These guidelines are suggested for the applicant's use. 

Arrangement of the Specification 

As provided in 37 CFR 1 .77(b), the specification of a utility application should 
include the following sections in order. Each of the lettered items should appear in 
upper case, without underlining or bold type, as a section heading. If no text follows the 
section heading, the phrase "Not Applicable" should follow the section heading: 

(a) TITLE OF THE INVENTION. 

(b) CROSS-REFERENCE TO RELATED APPLICATIONS. 

(c) STATEMENT REGARDING FEDERALLY SPONSORED RESEARCH OR 

DEVELOPMENT. 

(d) THE NAMES OF THE PARTIES TO A JOINT RESEARCH AGREEMENT 

(e) INCORPORATION-BY-REFERENCE OF MATERIAL SUBMITTED ON A 

COMPACT DISC (See 37 CFR 1.52(e)(5) and MPEP 608.05. Computer 
program listings (37 CFR 1.96(c)), "Sequence Listings" (37 CFR 1.821(c)), 
and tables having more than 50 pages of text are permitted to be 
submitted on compact discs.) or 

REFERENCE TO A "MICROFICHE APPENDIX" (See MPEP § 608.05(a). 
"Microfiche Appendices" were accepted by the Office until March 1, 2001.) 

(f) BACKGROUND OF THE INVENTION. 

(1) Field of the Invention. 

(2) Description of Related Art including information disclosed under 37 
CFR 1.97 and 1.98. 

(g) BRIEF SUMMARY OF THE INVENTION. 

(h) BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWING(S). 

(i) DETAILED DESCRIPTION OF THE INVENTION. 

(j) CLAIM OR CLAIMS (commencing on a separate sheet). 

(k) ABSTRACT OF THE DISCLOSURE (commencing on a separate sheet). 

(I) SEQUENCE LISTING (See MPEP § 2424 and 37 CFR 1.821-1.825. A 
"Sequence Listing" is required on paper if the application discloses a 
nucleotide or amino acid sequence as defined in 37 CFR 1.821(a) and if 
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the required "Sequence Listing" is not submitted as an electronic 
document on compact disc). 

Content of Specification 

(a) Title of the Invention : See 37 CFR 1 .72(a) and MPEP § 606. The title of 
the invention should be placed at the top of the first page of the 
specification unless the title is provided in an application data sheet. The 
title of the invention should be brief but technically accurate and 
descriptive, preferably from two to seven words may not contain more 
than 500 characters. 

(b) Cross-References to Related Applications : See 37 CFR 1 .78 and MPEP 
§201.11. 

(c) Statement Regarding Federally Sponsored Research and Development : 
See MPEP §310. 

(d) The Names Of The Parties To A Joint Research Agreement : See 37 CFR 
1.71(g). 

(e) Incorporation-Bv-Reference Of Material Submitted On a Compact Disc: 
The specification is required to include an incorporation-by-reference of 
electronic documents that are to become part of the permanent United 
States Patent and Trademark Office records in the file of a patent 
application. See 37 CFR 1, 52(e) and MPEP § 608.05. Computer 
program listings (37 CFR 1.96(c)), "Sequence Listings" (37 CFR 1.821(c)), 
and tables having more than 50 pages of text were permitted as electronic 
documents on compact discs beginning on September 8, 2000. 

Or alternatively, Reference to a "Microfiche Appendix ": See MPEP § 
608.05(a). "Microfiche Appendices" were accepted by the Office until 
March 1, 2001, 

(f) Background of the Invention : See MPEP § 608.01(c). The specification 
should set forth the Background of the Invention in two parts: 

(1 ) Field of the Invention : A statement of the field of art to which the 
invention pertains. This statement may include a paraphrasing of 
the applicable U.S. patent classification definitions of the subject 
matter of the claimed invention. This item may also be titled 
"Technical Field." 
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(2) Description of the Related Art including information disclosed under 
37 CFR 1.97 and 37 CFR 198 : A desaiption of the related art 
known to the applicant and including, if applicable, references to 
specific related art and problems involved in the prior art which are 
solved by the applicant's invention. This item may also be titled 
"Background Art." 

(g) Brief Summary of the Invention : See MPEP § 608.01 (d). A brief summary 
or general statement of the invention as set forth in 37 CFR 1 .73. The 
summary is separate and distinct from the abstract and is directed toward 
the invention rather than the disclosure as a whole. The summary may 
point out the advantages of the invention or how it solves problems 
previously existent in the prior art (and preferably indicated in the 
Background of the Invention). In chemical cases it should point out in 
general terms the utility of the invention. If possible, the nature and gist of 
the invention or the inventive concept should be set forth. Objects of the 
invention should be treated briefly and only to the extent that they 
contribute to an understanding of the invention, 

(h) Brief Description of the Several Views of the Drawing(s) : See MPEP § 
608.01 (f). A reference to and brief description of the drawing(s) as set 
forth in 37 CFR 1,74. 

(i) Detailed Description of the Invention : See MPEP § 608.01(g). A 
description of the preferred embodiment(s) of the invention as required in 
37 CFR 1 .71 . The description should be as short and specific as is 
necessary to describe the invention adequately and accurately. Where 
elements or groups of elements, compounds, and processes, which are 
conventional and generally widely known in the field of the invention 
described and their exact nature or type is not necessary for an 
understanding and use of the invention by a person skilled in the art, they 
should not be described in detail. However, where particularly 
complicated subject matter is involved or where the elements, 
compounds, or processes may not be commonly or widely known in the 
field, the specification should refer to another patent or readily available 
publication which adequately describes the subject matter. 

(j) Claim or Claims : See 37 CFR 1 .75 and MPEP § 608.01 (m). The claim or 
claims must commence on separate sheet or electronic page (37 CFR 
1 .52(b)(3)). Where a claim sets forth a plurality of elements or steps, each 
element or step of the claim should be separated by a line indentation. 
There may be plural indentations to further segregate subcombinations or 
related steps. See 37 CFR 1.75 and MPEP § 608.01 (i)-(p). 
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(k) Abstract of the Disclosure : See MPEP § 608.01 (f). A brief narrative of the 
disclosure as a whole in a single paragraph of 150 words or less 
commencing on a separate sheet following the claims. In an international 
application which has entered the national stage (37 CFR 1.491(b)), the 
applicant need not submit an abstract commencing on a separate sheet if 
an abstract was published with the international application under PCT 
Article 21 . The abstract that appears on the cover page of the pamphlet 
published by the International Bureau (IB) of the World Intellectual 
Property Organization (WlPO) is the abstract that will be used by the 
USPTO. See MPEP § 1893.03(e). 

(I) Sequence Listing. See 37 CFR 1.821-1.825 and MPEP §§ 2421-2431. 
The requirement for a sequence listing applies to all sequences disclosed 
in a given application, whether the sequences are claimed or not. See 
MPEP §2421.02. 

Claim Rejections - 35 USC § 101 

5. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

Claims 1 - 12 are rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. 

MPEP 2106 IV.B.2- (b) A claim that requires one or more acts to be performed defines 
a process. However, not all processes are statutory under 35 U.S.C. 101. Schrader, 22 
F.3d at 296, 30 USPQ2d at 1460. To be statutory, a claimed computer-related process 
must either: (A) result in a physical transformation outside the computer for which a 
practical application is either disclosed in the specification or would have been known to 
a skilled artisan, or (B) be limited to a practical application. 



Claims 1, 7 in view of the above cited MPEP sections, are not statutory 
because they merely recite a number of computing steps without producing any 
tangible result and/or being limited to a practical application. 

Claims 1 ,7 teach " a computer database containing records of known executable 
programs which are deemed to be not malware and criteria by which a file being 
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processed can be determined to be an instance of one of those programs", "means for 
processing a file being transferred between computers to determine whether the file 
matches the criteria characterizing a file as an unchanged instance of a program in the 
database" and "means for signaling the file as known or not depending on the 
determination made by the processing means . The claim teaches a computer 
database containing records of known executable programs which are deemed to be 
not malware and criteria by which a file being processed can be determined to be an 
instance of one of those programs, means for processing a file ...to determine whether 
the file matches the criteria characterizing a file as an unchanged instance of a program 
in the database and means for signaling the file as known or not depending on the 
determination made by the processing means. The processing step results in a 
determination which produces a signal indicating the file as known or unknown. The 
claim does not provide a tangible result as the results are not stored or displayed to the 
user. 

Claim Rejections - 35 USC § 102 

6. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 1 22(b), by another filed in the 
United States before the invention by the applicant for patent or (2) a patent granted on an application for patent by 
another filed in the United States before the invention by the applicant for patent, except that an international application 
filed under the treaty defined in section 351(a) shall have the effects for purposes of this subsection of an application filed 
in the United States only if the international application designated the United States and was published under Article 
21(2) of such treaty In the English language. 
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Claims 1-5, 7-11 are rejected under 35 U.S.C. 102(e) as being anticipated by 
US Patent Application Publication Number 2004/0088570 issued to Guy William 
Welch Roberts et al ("Roberts"). 

As per claims 1,7 Roberts anticipates: 

a) a computer database containing records of known executable programs which are 
deemed to be not malware and criteria by which a file being processed can be 
determined to be an Instance of one of those programs (see paragraph 34, lines 1-7); 

b) means for processing a file being transferred between computers to determine 
whether the file matches the criteria characterizing a file as an unchanged Instance of a 
program in the database (paragraph 36, lines 1-10 and paragraph 37, lines 1-14); and 

c) means for signaling the file as known or not depending on the determination made by 
the processing means (paragraph 38, lines 1-12). 

Roberts teaches a computer database containing records of known executable 
programs which are deemed to be not malware and criteria by which a file being 
processed can be determined to be an instance of one of those programs, means for 
processing a file being transferred between computers to determine whether the file 
matches the criteria characterizing a file as an unchanged instance of a program In the 
database, and means for signaling the file as known or not depending on the 
determination made by the processing means (paragraph 34, lines 1-7, paragraph 36, 
lines 1-10, paragraph 37, lines 1-14 and paragraph 38, lines 1-12). 
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As per claims 2, 8, same as claim arguments above and Roberts anticipates: 
d) means for processing an inputted file to determine whether it is considered to be, or 
considered possibly to be, infected with a virus, and wherein, in operation of the system, 
a file is subjected to processing by the means d) unless the file is signaled as safe by 
the signaling means c) (paragraph 37, lines 1-6 and paragraph 38). 

As per claims 3,9, same as claim arguments above and Roberts anticipates: 
wherein the processing means b) comprises b1 ) a file recognizer for determining 
whether the file being processed is an instance of a known file (paragraph 36, lines 6- 
10, paragraph 37, lines 1-3 and Figure 6, Ref. No. 42); 
a difference checker for checking whether the file is an unchanged version of that 
known file (paragraph 37, lines 8-14, checksum). 

As per claims 4,10 same as claim arguments above and Roberts anticipates: 
wherein the file recognizer includes means for checking the contents of the file being 
processed for the presence of at least one characteristic signature associated with a file 
which is considered to be known and uninfected (paragraph 34, lines 1-7). 
As per claims 5,1 1 , same as claim arguments above and Roberts anticipates: 
wherein the processing means b) includes means for generating a checksum for the 
entire file under consideration or for at least one selected region thereof, and means for 
comparing the checksum or checksums with those of entries in the database 
(paragraph 37, lines 8-14). 
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Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the Invention is not identically disclosed or described as set forth in section 1 02 
of this title, if the differences between the subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made to a person having ordinary skill in the art 
to which said subject matter pertains. Patentability shall not be negatived by the manner In which the invention was 
made. 

Claims 6,12 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
US Patent Application Publication Number 2004/0088570 issued to Guy William 
Welch Roberts et al ("Roberts") in view of US Patent Number 5,617,533 issued to 
Wu et al ("Wu"). 

As per claim 6, 12 Roberts teaches signaling means is operative to signal the file as 
malware ... or as unknown if it is (paragraph 38). Roberts does not explicitly teach 
including an exception list handler for determining, in relation to a file which the 
processing means b) has determined is not a known file, whether that file has 
characteristics matching an entry in an exception list of files. Wu does teach these 
limitations at column 8, lines 7-17, column 12, lines 54-60 and column 13, lines 32-45. It 
would have been obvious to one of ordinary skill in the art at the time of the invention to 
combine the cited references to determine whether the corresponding software 
conforms with package rules (column 7, lines 50-57). 
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Contact Information 



8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Susan Rayyan whose telephone number is (571) 272- 
1675. The examiner can normally be reached M-F: Sam - 4:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, John Cottingham can be reached on (571) 272-7079. The fax phone 
number for the organization where this application or proceeding is assigned is 
703-872-9306. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR 
only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toil-free). 



Susan Rayyan 





May 13, 2006 




